# Cybersecurity Basics Every Small Business in Kathmandu, Nepal Should Have

> Most attacks on small businesses are automated scans for outdated software and weak settings, not targeted at you. Update everything, use strong unique passwords with two-factor authentication, add a web application firewall and keep separate backups.

Source: https://webappnepal.com/blog/cybersecurity-basics-small-business
Provider: WebApp Nepal, Kathmandu, Nepal
Published: 2026-04-26
Updated: 2026-08-07T21:03:41.000000Z

Small businesses in Kathmandu, Nepal often assume cyberattacks are a large-company problem, but most automated attacks do not target specific businesses at all; they scan the internet broadly for outdated software and weak configurations, and a small business is just as visible to that scan as a large one.

The basics that stop the majority of these automated attacks are not expensive: keeping all software updated, using a web application firewall on hosting where available, enforcing strong unique passwords with two-factor authentication, and taking regular backups stored somewhere separate from the live server.

Beyond technical measures, staff awareness matters just as much: a large share of real breaches start with a phishing email tricking someone into giving up a password, not a sophisticated technical exploit. A short, practical training session for staff who manage the website or handle customer data often prevents more damage than any single piece of security software.

## Frequently asked questions

### Are small businesses really targeted?

Most automated attacks scan the internet for outdated software and weak setups, so a small business is as visible as a large one.

### What basics stop most attacks?

Updating all software, a web application firewall, strong unique passwords with two-factor authentication and regular separate backups.

### Are these basics expensive?

No, they are not expensive.